www3-coinbase[.]com

The domain www3-coinbase.com was registered on September 22, 2025 via the registrar 101domain.com and is currently taken offline. Infrastructure analysis shows the domain resolves to the IP address 13.65.229.69, which belongs to AS8075 Microsoft Corporation and is geographically located in the United States. The authoritative nameservers are lochlan.ns.cloudflare.com and rafe.ns.cloudflare.com, indicating the use of Cloudflare's DNS service. No SSL/TLS certificate is presented for the host, leaving the connection unencrypted and exposing any traffic to potential interception.

The site is classified as a crypto scam that impersonates the financial services brand Coinbase; the brand target is explicitly listed as Coinbase. Detection data from VirusTotal records that 15 of 95 security vendors have flagged the domain, providing a moderate level of corroboration across scanning engines. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service. Gridinsoft’s trust scoring system assigns the domain a score of 0 out of 100, reflecting a complete lack of trustworthiness.

While the offline status prevents real‑time interaction, the presence of a Microsoft‑hosted IP, Cloudflare DNS, and the absence of TLS suggest a deliberately low‑cost hosting setup typical of impersonation campaigns. Uncertainty remains regarding the specific payload or phishing kit employed, as no page title or content analysis is available. Defenders should add www3-coinbase.com to network and endpoint deny lists, enforce DNS sink‑holing for its IP range, and monitor for any re‑appearance on other blocklists. Continuous vigilance is advised, especially given the brand‑targeted crypto scam nature of the domain and its prior detection by multiple security vendors.